Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f20811b-fdcf-49f5-81f7-9d8385a53aec/ed510e65-0884-383d-a087-8860d6ea99fe.roa
File:                     ed510e65-0884-383d-a087-8860d6ea99fe.roa (raw, json)
Hash identifier:          woM2zIMmhK9I1dTLHkraM/g0RdvwuKr6qxiu77kakdg=
Subject key identifier:   44:EB:5D:37:FD:50:4E:86:25:8D:02:F1:CA:00:F5:9D:8A:B4:50:19
Certificate issuer:       /CN=5f20811b-fdcf-49f5-81f7-9d8385a53aec
Certificate serial:       010D0C9F4328584EA787F1CFF24EFE4C51BE6F80
Authority key identifier: DB:05:12:99:A8:AC:BF:2A:24:F3:63:6E:F5:68:7D:95:4B:61:85:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f20811b-fdcf-49f5-81f7-9d8385a53aec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f20811b-fdcf-49f5-81f7-9d8385a53aec/ed510e65-0884-383d-a087-8860d6ea99fe.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     8095
IP address blocks:        23.179.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f20811b-fdcf-49f5-81f7-9d8385a53aec/5f20811b-fdcf-49f5-81f7-9d8385a53aec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f20811b-fdcf-49f5-81f7-9d8385a53aec/5f20811b-fdcf-49f5-81f7-9d8385a53aec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f20811b-fdcf-49f5-81f7-9d8385a53aec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:f1:cf:f2:4e:fe:4c:51:be:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f20811b-fdcf-49f5-81f7-9d8385a53aec
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=1fcf07b3-19e9-4983-9efe-2c719a8d2809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:44:c0:46:94:3c:25:97:ac:93:06:66:6c:f6:
                    07:3f:b1:15:cc:ac:f9:d6:0b:30:5e:37:fd:50:2d:
                    b1:80:c7:bf:11:ef:9e:d9:a1:45:c6:08:25:22:19:
                    8b:8f:23:9b:aa:2a:97:74:8b:15:2d:68:25:7a:da:
                    29:1e:31:e5:b0:9d:08:cb:89:85:bc:28:72:a9:ba:
                    cc:60:eb:18:b9:12:2b:2c:b7:9a:0e:6f:de:fc:46:
                    a4:8a:7d:3d:3b:90:67:d2:ed:08:71:97:8e:ca:b2:
                    32:16:ad:eb:f1:ef:d0:39:f2:4a:94:e7:9e:44:0b:
                    89:c2:4d:51:d9:10:8c:d1:4b:d3:4d:7b:56:ae:2c:
                    b2:ea:21:c1:f2:6f:b2:b8:d8:3a:15:db:51:b1:92:
                    67:f7:80:ac:62:18:19:72:da:8f:c7:e5:ea:54:41:
                    8d:59:aa:49:5e:02:95:be:de:7b:1b:6f:ee:e3:93:
                    ec:40:e0:02:59:ae:68:ba:ed:d1:ec:b8:3a:8c:29:
                    7a:c7:f3:94:53:62:a1:b4:e5:88:0c:fa:85:20:94:
                    26:93:6b:e0:d5:d6:34:72:16:32:74:6a:e5:4b:72:
                    ac:5f:f1:fc:85:0d:c0:f6:ee:aa:39:a9:c1:a5:02:
                    d7:3f:f4:ed:de:f3:df:9a:f4:44:44:ad:95:57:f2:
                    bb:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:EB:5D:37:FD:50:4E:86:25:8D:02:F1:CA:00:F5:9D:8A:B4:50:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f20811b-fdcf-49f5-81f7-9d8385a53aec/ed510e65-0884-383d-a087-8860d6ea99fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f20811b-fdcf-49f5-81f7-9d8385a53aec/5f20811b-fdcf-49f5-81f7-9d8385a53aec.crl

            X509v3 Authority Key Identifier:
                keyid:DB:05:12:99:A8:AC:BF:2A:24:F3:63:6E:F5:68:7D:95:4B:61:85:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f20811b-fdcf-49f5-81f7-9d8385a53aec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.179.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:b3:c2:2f:8e:6c:8a:fc:75:df:f0:01:b3:8d:54:88:fc:d5:
         06:5e:a4:67:00:e1:02:31:cd:17:79:75:c4:41:ff:57:1a:fb:
         ec:47:94:a7:15:8b:a3:c7:ef:c5:f9:d9:49:54:af:69:5e:54:
         ee:69:c0:84:06:00:6d:c3:4b:89:96:e4:23:51:1b:db:94:90:
         62:d3:66:2a:0b:09:b3:b3:7c:8d:eb:e4:e2:53:90:9e:26:73:
         f9:ce:d3:8f:62:1a:df:4c:34:69:da:d2:37:2e:97:70:c1:36:
         d6:e3:9e:cd:0e:3c:a4:2c:28:9c:ff:59:d6:1d:98:3a:68:7d:
         d6:77:37:d6:ce:a5:12:da:c5:3b:f0:37:85:38:f6:fb:72:56:
         96:05:30:de:e8:8f:8b:39:40:85:15:59:b5:3a:e7:f9:90:d1:
         56:50:53:8f:a6:19:13:e0:df:c5:5e:69:88:cc:a9:98:8a:7b:
         29:4c:00:ba:0b:e7:35:7d:e0:76:19:4a:c3:78:de:1b:ad:24:
         b1:03:34:12:58:b8:57:f2:cb:1b:fb:8e:a6:c7:73:5c:23:66:
         d8:c0:b1:c8:bb:b1:e7:f3:53:cd:54:e7:a8:a7:f7:1f:06:a3:
         bd:b8:29:09:a0:ea:4f:2a:36:76:bd:b3:94:bd:40:69:21:b1:
         86:25:68:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:59:30 2026 by rpki-client